Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e382e302f32332d3233203d3e203238313832.roa
File:                     3138392e38392e382e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          n92tejaK/T/ox8FKWjejOz3/HCYiWVZ+Yd2rAtwTO+4=
Subject key identifier:   F2:E8:9C:C9:34:17:44:12:93:F5:51:73:B5:98:FA:28:42:11:0C:13
Certificate issuer:       /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial:       7DAAD17851299DB520F45A7E885535930CFD1E48
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e382e302f32332d3233203d3e203238313832.roa
Signing time:             Thu 30 Nov 2023 12:39:43 +0000
ROA not before:           Thu 30 Nov 2023 12:34:43 +0000
ROA not after:            Thu 28 Nov 2024 12:39:43 +0000
asID:                     28182
IP address blocks:        189.89.8.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:aa:d1:78:51:29:9d:b5:20:f4:5a:7e:88:55:35:93:0c:fd:1e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
        Validity
            Not Before: Nov 30 12:34:43 2023 GMT
            Not After : Nov 28 12:39:43 2024 GMT
        Subject: CN=F2E89CC93417441293F55173B598FA2842110C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c5:c5:4f:6c:db:77:22:69:41:e5:2f:32:ac:
                    8e:10:71:1c:8c:e1:e2:4c:c2:2c:28:80:7a:a7:8d:
                    ab:80:fb:eb:1a:77:61:c7:99:a6:7d:9e:08:75:25:
                    21:9c:91:da:b4:d5:a0:23:96:01:9e:32:b6:8b:d4:
                    dc:b2:8c:d3:5b:e2:ba:11:4e:7a:ff:41:3a:ea:d4:
                    48:6b:84:f0:9f:f4:fc:34:0a:da:b3:7b:4a:46:dd:
                    09:ad:e9:06:04:6a:93:aa:72:14:31:d6:62:c1:6f:
                    b9:5a:d4:2e:57:de:dc:92:1d:da:65:bd:e4:11:bd:
                    9a:fb:a4:5f:2c:b6:a3:3d:87:a2:e7:76:45:eb:39:
                    8e:5d:52:46:e3:92:25:2d:7c:f2:a0:43:94:bc:ac:
                    d4:ca:5c:c6:8e:62:b6:ae:8d:6c:2c:54:e6:fc:dd:
                    6e:c5:32:94:91:1d:df:5c:c1:16:cb:37:f9:13:b9:
                    bc:40:31:fb:ff:81:42:fa:3f:78:39:4e:ce:8d:d9:
                    a2:7d:81:65:5e:22:61:01:d9:09:44:62:9b:40:9e:
                    79:a0:08:21:fd:ac:15:4d:14:82:cb:f3:67:b4:80:
                    e5:92:0a:23:18:2f:d5:08:aa:47:cd:0e:d1:39:aa:
                    22:dd:d4:11:ed:fd:25:0e:2d:2b:25:ed:39:a2:51:
                    07:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E8:9C:C9:34:17:44:12:93:F5:51:73:B5:98:FA:28:42:11:0C:13
            X509v3 Authority Key Identifier:
                keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e382e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:29:ae:50:85:1e:11:58:70:9b:77:d8:1f:4b:8f:97:a2:72:
         11:1c:5c:b1:58:03:c7:14:b5:89:60:3d:be:b1:19:3c:2e:db:
         66:62:06:cc:15:6e:43:cf:b8:8a:78:ba:c5:af:7b:bd:9d:0e:
         d8:e5:c2:29:9a:92:ee:23:2f:59:e2:55:3b:f2:ab:33:6f:da:
         00:e7:1f:f5:2e:85:60:0e:6e:68:58:25:d2:51:73:a0:e2:ba:
         76:e2:be:5d:f9:b0:57:6a:b5:98:44:4b:01:20:93:e8:12:16:
         f9:07:30:9c:6b:c1:05:1c:02:b0:1e:27:78:11:9d:be:bd:0b:
         27:ae:5c:ef:ee:7d:58:e3:99:b8:6e:70:f0:78:a7:99:e8:77:
         6e:a0:06:c3:ae:b5:e8:fc:e5:2b:19:45:17:8a:4e:f5:e9:22:
         0b:e7:5f:2d:33:09:64:b6:b3:b4:e7:a5:28:f5:cc:49:bd:10:
         b4:03:0d:75:d7:0b:ef:33:0c:88:f7:8e:6f:6b:aa:62:74:18:
         7a:6f:d4:34:ea:ea:d9:ac:3d:0e:50:bd:2b:6a:d7:c7:2e:20:
         68:1f:ef:41:4c:57:c6:25:ce:3a:f4:3a:a5:3c:df:bc:aa:77:
         d4:56:87:9b:56:97:1f:e2:73:08:34:cd:0e:7b:63:cb:b8:16:
         31:20:55:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net